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Amendments to the Claims 

The listing of claims will replace all prior versions, and listings of claims in the 
application. 



1 . (Currently Amended) A method for approving a security change for a file 
security system that secures electronic files, comprising: 

receiving a request for the security change firom a requesto r, the securitv change 
being used for determining access rights to an electronic file : 

identifying a plurality of approvers to approve or disapprove of the requested 
security change by accessing an approver set in an approval manager module; 

notifying the approvers of an approval request for the requested security to 
change; 

determining whether the requested security change is approved based on 
responses firom the approvers to the approval request; and 

performing the requested security change when said determining determines that 
the requested security change h£is been approved. 

2. (Previously Presented) The method as recited in claim 1, wherein said 
notifying of the approvers is achieved by electronic mail. 



3. (Previously Presented) The method as recited in claim 2, wherein the 
responses firom the approval group are provided as electronic mail. 
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4. (Previously Presented) The method as recited in claim 1, wherein no one 
of the plurality of approvers can individually approve the requested security change. 

5. (Previously Presented) The method as recited in claim 1, wherein the 
plurality of approvers are arranged as a set or group. 

6. (Previously Presented) The method as recited in claim 1, wherein the 
plurality of approvers are arranged in a plurality of sets or groups, and 

wherein said determining requires approval from more than one of the plurality 
of sets or groups in order to determine that the requested security change is approved. 

7. (Previously Presented) The method as recited in claim 6, wherein the 
plurality of sets or groups are arranged in a hierarchy, and wherein progression to a next 
level in the hierarchy requires approval from the set or group associated with a current 
level. 

8. (Previously Presented) The method as recited in claim 1, wherein the 
plurality of approvers are users of the file security system. 

9. (Previously Presented) The method as recited in claim 1, wherein the 
plurality of approvers form a set of approvers, and 

wherein said determining determines that the requested security change is 
approved when a subset of the set of approvers approve the requested security change. 
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10. (Previously Presented) The method as recited in claim 1, wherein the 
plurality of approvers identified by said identifying is dependent on the requested 
security change. 

11. (Previously Presented) The method as recited in claim 1, wherein the 
plurality of approvers identified by said identifying is dependent on the requestor. 

12. (Previously Presented) The method as recited in claim 1, wherein said 
notifying operates to substantially simultaneously notify all of the approvers of the 
approval request for the requested security change. 

13. (Previously Presented) The method as recited in claim 1, wherein said 
notifying operates to substantially concurrently notify all of the approvers of the 
approval request for the requested security change. 

14. (Previously Presented) The method as recited in claim 1, wherein the 
electronic files secured by the file security system are electronic documents. 
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15. (Currently Amended) A file security system that restricts access to 
secured electronic documents, comprising: 

an access server that restricts access to the secured electronic documents; and 
an approval manager operatively connected to said access server, wherein said 
approval manager operates a security change approval process to determine whether a 
requested security change is approve d, the security change being used for determining 
access rights to the secured electronic documents, 

wherein, in operating the security change approval process, a plurality of 
approvers are notified of the requested security change and asked to approve or 
disapprove the requested security change, the plurality of approvers identified by 
accessing an approver set in an approval manager module . 

16. (Previously Presented) The file security system as recited in claim 15, 
wherein said file security system has one or more system administrators, and wherein 
said approval manager operates the security change approval process without any 
interaction fi-om the one or more system administrators. 

17. (Cancelled) 

18. (Previously Presented) The file security system as recited in claim 15, 
wherein the plurality of approvers are notified by notification electronic mail messages. 
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19. (Previously Presented) The file secvirity system as recited in claim 18, 
wherein the plurality of approvers approve or disapprove the requested security change 
using reply electronic mail messages. 

20. (Previously Presented) The file security system as recited in claim 19, 
wherein the reply electronic mail messages include a digital signature of the associated 
approver to verify authenticity. 

21. (Previously Presented) The file security system as recited in claim 15, 
wherein no one of the approvers can individually approve the requested security change. 

22. (Previously Presented) The file security system as recited in claim 15, 
wherein the plurality of approvers are arranged as a set or group. 

23. (Previously Presented) The file security system as recited in claim 15, 
wherein the plurality of approvers are arranged into a plurality of sets or groups, and 

wherein said approval manager requires approval fi-om more than one of the 
plurality of sets or groups in order to determine that the requested security change is 
approved. 
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24. (Previously Presented) The file security system as recited in claim 15, 
wherein the plurality of sets or groups are arranged in a hierarchy, and wherein 
progression to a next level in the hierarchy requires approval firom the set or group 
associated with a current level. 

25. (Previously Presented) The file security system as recited in claim 15, 
wherein the approvers are users of the file security system. 

26. (Previously Presented) The file security system as recited in claim 15, 
wherein the plurality of approvers form a set of approvers, and 

wherein said approval manager determines that the requested security change is 
approved when a subset of the set of approvers approve the requested security change. 

27. (Previously Presented) The file security system as recited in claim 15, 
wherein said approval manager identifies the plurality of approvers dependent on the 
requested security change. 

28. (Previously Presented) The file security system as recited in claim 15, 
wherein said approval manager identifies the plurality of approvers dependent on the 
requestor. 
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29. (Previously Presented) The file security system as recited in claim 15, 
wherein said file security system fiirther comprises: 

a key store operatively connected to said access server, said key store stores 
cryptographic keys used to gain access to the secured electronic documents. 

30. (Currently Amended) A tangible data storage device including at least 
computer program code for approving a security change for a file security system that 
secures electronic files , the securitv change being used for determining access rights to 
one of the electronic files , comprising: 

computer program code for notifying a plurality of approvers of an approval 
request for the requested security change, the plurality of approvers identified by 
accessing an approver set in an approval manager module; 

computer program code for determining whether the requested security change is 
approved based on responses firom the approvers to the approval request; and 

computer program code for performing the requested security change when said 
determining determines that the requested security change has been approved. 

31. (Previously Presented) The data storage device as recited in claim 30, 
wherein said notifying of the approvers is achieved by electronic mail. 

32. (Previously Presented) The data storage device as recited in claim 31, 
wherein the responses from the approval group are electronic mail. 
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33. (Previously Presented) The data storage device as recited in claim 30, 

wherein no one of the pluraUty of approvers can individually approve the requested 

security change. 



34. (Currently Amended) A method for approving a security change for a file 
security system that secures an electronic file, comprising: 

(a) receiving a security change request from a requesto r, the securitv change 
being used for determining access rights to the electronic file : 

(b) determining whether the requestor is authorized to perform the requested 
security change; 

(c) receiving an approval request from the requestor, if the requestor is not 
authorized to perform the requested security change; 

(d) based on the receipt of the approval request, performing the steps of: 

(dl) identifying one or more approvers to approve or disapprove of the 
requested security change; 

(d2) notifying the one or more approvers of an approval request for the 
requested security to change; and 

(d3) determining whether the requested security change is approved based 
on responses from the one or more approvers to the approval request; and 

(e) performing the requested security change when the first determining step 
determines that the requestor is authorized to perform the requested security change, or 
when the second determining step determines that the requested security change has been 
approved. 

Atty. Dkt. No. 2222.5460000 



- 1 0 - Michael Frederick KENRICH 

Appl. No. 10/690,243 

35. (Currently Amended) A file security system that restricts access to a 
secured electronic document, comprising: 

an access server that restricts access to the secured electronic document; and 
an approval manager module operatively connected to said access server, wherein 
said approval manager module determines whether fee a security change is authorized^ 
the security change being used for determining access rights to the secured electronic 
document, and, if not, operates a security change approval process upon receipt of an 
approval request to determine whether a requested security change is approved. 

36. (Currently Amended) A tangible data storage device including at least 
computer program code for approving a security change for a file security system that 
secures an electronic file, comprising: 

computer program code for determining whether the requested security change is 
authorize d, the security change being used for determining access rights to the electronic 
file ; 

computer program code for notifjdng one or more approvers of an approval 
request for the requested security change, if the requested security change is not 
authorized and an approval request is received; 

computer program code for determining whether the requested security change is 
approved based on responses from the one or more approvers to the approval request; 
and 
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computer program code for performing the requested security change when said 

first determining determines that the requested security change is authorized or said 

second determining determines that the requested security change has been approved. 
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